IN THE CLAIMS : 

Please amend claims 1-4, 6, 14, 21, 24-31 and cancel claim 22, without prejudice 
of disclaimer, as follows. 

1. (Currently Amended) A method for determining an address of a network 
node for a certificate issuance and delivery procedure, said network node serving; a 
certificate authority in a visited n etwork where the subscriber currently locates in a 
mobile communication system, the method comprising: 

maintaining in the mobile communication system subscriber's location 
information; and 

determinin g, in response to receiving a message from subscriber's user equipment, 
said message indicating that the address of the network node in the visited network is 
requested, on the basis of the subscriber's location information the address of the network 
node. 

2. (Currently Amended) The method of claim 1, wherein the message further 
indicates the address of the network node, and the method further comprises comprising : 

receiving in the mobile communication syst e m a message from subscriber's user 
equipment, the message indicating the address of the network node; 

checking whether or not the address which the message indicated corresponds to 
the address determined on the basis of the location information; and 



if they do not correspond to each other, using the address determined on the basis 
of the location information. 

3. (Currently Amended) The method of claim 1, wherein the message 
includes subscriber's location information, and the method further comprises coniprising : 

receiving in the mobil e communication system a messag e from subscriber's user 
equipment, the message including subscriber's location information; 

checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and 

using the maintained location information if it does not correspond to the location 
information in the message. 

4. (Currently Amended) A method for determining an address of a network 
node address for a certificate issuance and delivery procedure, said network node serving 
a certificate authority in a mobile communication system, the network node being in a 
location network of a subscriber, said location network being a visited network of the 
subscriber, t he method comprising: 

receiving in the mobile communication system a message fi-om subscriber's user 
equipment, the message indicating subscriber's location information; and 

determinin g, in response to the message, on the basis of the subscriber's location 
information the address of the network node in the visited network . 
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5. (Original) The method of claim 4, wherein the message contains a global 
cell identifier which indicates the subscriber's location information. 

6. (Currently Amended) A method for transmitting, to subscriber's user 
equipment, information required for a certificate issuance service in another network than 
a home network in a mobile communication system, the method comprising: 

authenticating the subscriber; and 

transmitting to the user equipment at least part of the information required for 
obtaining the certificate in the other network during the subscriber authentication. 

7. (Original) The method of claim 6, wherein the authentication is application 
level authentication. 

8. (Previously Presented) The method of claim 6, wherein the user equipment 
utilizes said part of the information during a certificate issuance procedure in a visited 
network. 

9. (Original) The method of claim 6, wherein said part of the information is 
location network specific information. 



10. (Original) The method of claim 6, wherein said part of the information 
comprises at least an address of a network node via which the service is provided. 

11. (Original) The method of claim 6, wherein said part of the information 
comprises at least a public key required for the service. 

12. (Original) The method of claim 6, wherein said part of the information 
comprises at least an indication of the protocol required for the service. 

13. (Original) The method of claim 6, wherein the service is certificate 
issuance service and said part of the information comprises at least an address of a 
network node via which the service is provided and the method further comprising 
transmitting from the user equipment a certificate request to the network node. 

14. (Currently Amended) A method for transmitting to subscriber's user 
equipment information required for a certificate issuance service in another network than 
a home network of the subscriber in a mobile communication system, the method 
comprising: 

authenticating the subscriber; 

receiving a message relating to the service; and 
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transmittin g, in response to the message, to the user equipment in a reply message 
at least part of the information required for obtaining the certificate in the other network 
in response to the received message. 

15. (Original) The method of claim 14, wherein the message and the reply 
message are transmitted in an integrity protected channel. 

16. (Original) The method of claim 15, wherein the message is transmitted 
from the user equipment, the message is requesting an address of a network node via 
which the service is provided and said part of the information comprises at least the 
requested address.. 

17. (Original) The method of claim 16, further comprising transmitting from 
the user equipment a certificate request to the network node. 

18. (Original) The method of claim 14, wherein said part of the information 
comprises at least a public key required for the service. 

19. (Original) The method of claim 15, wherein said part of the information 
comprises at least an indication of the protocol required for the service. 
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20. (Original) The method of claim 11, wherein the message relates to a 
certificate issuance service. 

21. (Currently Amended) A mobile communication system comprising at least 
user equipmen t, home network for the user equipment and a visited network comprising 
at least a network node for a certificate issuance and delivery procedure, said network 
node serving a certificate authority , the system being configured to determine an a 
network node address of the network node on the basis of location information of the user 
equipmen t, wherein the network node is in a location network of the user equipment . 

22. (Cancelled) 

23. (Original) The system of claim 21 comprising a gateway network for 
certificate requests in a home network of the user equipment, the gateway network being 
configured to perform the network node address determination. 

24. (Currently Amended) The method of claim 1, wherein the message 
includes subscriber's location information, and the method further comprises comprising : 

receiving in the mobile communication system a message from subscriber's user 
equipment, the message including subscriber's location information; 
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checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and 

if it does not correspond to the location information in the message, sending an 
error indication by using the maintained location information. 

25. (Currently Amended) The method of claim 1, wherein the message 
includes subscriber's location information, and the method further comprises comprising : 

receiving in the mobile communication system a message from subscriber's user 
e quipment, th e message including subscriber's location information; 

checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and 

using the location information in the message if it does not correspond to the 
maintained location information. 

26. (Currently Amended) The method of claim 1, wherein the message 
includes subscriber's location information, and the method further comprises comprising : 

receiving in the mobile communication system a message from subscriber's user 
equipment, the mes s age including subscriber's location information; 

checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and 
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if it does not correspond to the maintained location information, sending an error 
indication by using the location information in the message. 

27. (Currently Amended) A method for transmitting to subscriber's user 
equipment information required for a certificate issuance service in a mobile 
communication system, the method comprising: 

authenticating the subscriber; and 

transmitting to the user equipment at least part of the information using an 
authenticated channel, said at least part of the information containing information 
required for obtaining the certificate in another network than a home network of the 
subscriber . 

28. (Currently Amended) A network node in a mobile communication system, 
wherein the network node (AU H) is in a home network of a subscriber and arranged to 
determine , in response to receiving a message indicating a request for a service from the 
subscriber, an address of another network node required for providing a-the service for a 
the subscriber on the basis of subscriber's location information , said another network 
node being in another network than the home network . 

29. (Currently Amended) The network node of claim 28, wherein the network 
node (AU H) is in a home network and t he other network node is in a visited network. 
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30. (Currently Amended) User equipment in a mobile conmiunication system, 
wherein the user equipment (UE) is arranged to receive at least part of information 
required for a certificate issuance service in a location network of the user equipment 
after the user equipment has been authenticated, said location network being a visited 
network and said at least part of the information containing information required for 
obtaining the certificate in the visited network . 

31. (Currently Amended) The user equipment of claim 30, wherein the user 
equipment (UE) is arranged to receive said part of the information from a network node 
with which the user equipment was authenticated, the network node being in a home 
network. 
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